One of the most serious data breaches in the insurance industry has been officially confirmed by Aflac. The US insurance company said it has begun the process of notifying approximately 22.65 million peoplewhose personal information was stolen in a cyberattack that was first disclosed in June.
In its initial announcement, Aflac confirmed the breach of sensitive information, but did not specify the scope of customers affected. The new update reveals the true scale of the attack, which affected nearly half of the company's customers.
What kind of data was exposed?
In a formal filing with the Texas attorney general's office, Aflac detailed the range of data stolen by the attackers, including customer names, dates of birth, home addresses, and government identification documents such as passport numbers, state IDs, and driver's licenses.
See also: Baker University: Data breach affects 53,000 people
Of particular concern is that the stolen data includes social security numbers , as well as medical and health insurance information . The combination of these elements creates ideal conditions for identity theft, financial fraud, and targeted phishing attacks .
Suspicions of an organized criminal group
In a separate filing with the Iowa attorney general, Aflac suggested that the attackers may be linked to a known cybercriminal organization . The company said federal authorities and cybersecurity experts have noted that the group appears to be systematically targeting the insurance industry.
Although not officially named, the evidence points to Scattered Spider, a loosely organized group of mostly young, English-speaking hackers that has recently been linked to a series of attacks on large organizations. The group had also targeted other insurance companies during that time.
See also: Nissan: Customer data breach due to Red Hat attack
Market anxiety
According to data on its official website, Aflac serves approximately 50 million customers worldwide, making the breach one of the largest ever recorded in the insurance sector.
Part of a wider wave of attacks
The Aflac case is not an isolated incident. During the same period, other insurance companies in the United States also reported cyberattacks and data breaches, including Erie Insurance and Philadelphia Insurance Companies. This reinforces the scenario of coordinated attacks targeting an industry that handles vast amounts of sensitive personal and financial data.
See also: University of Phoenix: Data breach affects 3.5 million people
What does this mean for consumers?
For the millions of people affected, this breach is not just a theoretical risk. Experts recommend increased vigilance, monitoring credit reports and paying attention to suspicious messages or phone calls that may be exploiting stolen data.
A bell for the insurance industry
The Aflac incident highlights in the clearest way that the insurance industry is now the target of sophisticated cybercriminal groups. As attacks become more targeted and destructive, investing in cybersecurity is no longer an option but a necessity — not only to protect companies, but also to ensure the trust of millions of citizens.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
